Launchpad.net

CVE 2016-10513

Cross Site Scripting (XSS) exists in Piwigo before 2.8.3 via a crafted search expression to include/functions_search.inc.php.

See the CVE page on Mitre.org for more details.